Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu5NaTTVxLL_qHOWKCkunVoQHsE.roa
File: Cu5NaTTVxLL_qHOWKCkunVoQHsE.roa (raw, json)
Hash identifier: z6PpM3SD/zlI5EsgctuNN3kbPjR4rUkcfcIWdDkBYyU=
Subject key identifier: 0A:EE:4D:69:34:D5:C4:B2:FF:A8:73:96:28:29:2E:9D:5A:10:1E:C1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183DBB071E64E12E70F8B1A79F0438F85DF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu5NaTTVxLL_qHOWKCkunVoQHsE.roa
Signing time: Sat 15 Oct 2022 12:48:37 +0000
ROA not before: Sat 15 Oct 2022 12:48:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0e:97c6:4000::/34 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 44
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:db:b0:71:e6:4e:12:e7:0f:8b:1a:79:f0:43:8f:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 15 12:48:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aee4d6934d5c4b2ffa8739628292e9d5a101ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:54:78:d5:af:b9:d7:0a:19:82:5a:71:b1:
e5:97:a2:0e:e9:00:ce:9f:95:a0:b0:ab:e4:9e:22:
1a:68:8b:27:e9:83:28:dd:0a:4f:8c:98:03:d7:7b:
b9:e8:1a:6f:f6:16:d3:f7:1b:96:81:3b:6c:f6:64:
44:b5:f7:c6:eb:61:4d:15:80:1a:61:e1:db:a8:81:
8c:51:c4:18:81:26:df:5f:2e:0e:23:23:34:b8:09:
b9:f2:c9:6f:d6:2d:ad:1c:79:f0:1b:71:0b:96:1e:
81:8c:81:3c:03:c6:53:e6:ae:ba:36:7e:eb:4e:cd:
31:20:b2:b4:59:83:d5:79:ba:33:01:34:f2:b8:43:
40:ea:89:5f:ec:d9:ee:53:fd:b6:83:ee:b4:18:8e:
e0:a9:85:6e:08:17:c9:a1:8c:3e:26:9a:f2:b6:9e:
19:47:c9:8e:ac:e2:a4:1d:48:61:0f:b5:51:6f:a8:
3d:0c:6c:e9:14:0c:5e:d3:50:cb:2b:8d:ac:c9:44:
f7:91:7c:29:84:b4:8c:1c:a3:68:27:21:63:e6:0a:
91:38:73:eb:49:8b:4d:70:5a:41:7f:80:21:4c:11:
f4:3c:74:3e:34:28:0d:d3:b1:06:e9:75:ef:c3:4e:
7c:98:70:a2:02:50:fd:cf:de:d1:a4:86:8e:e6:62:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:4D:69:34:D5:C4:B2:FF:A8:73:96:28:29:2E:9D:5A:10:1E:C1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu5NaTTVxLL_qHOWKCkunVoQHsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c6:4000::/34
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:cc40:1c0::/44
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
95:42:23:5b:06:65:30:e2:e6:2e:80:25:25:c0:f7:5e:49:6d:
51:05:93:fb:ad:af:d6:b6:9f:d1:b3:8c:be:74:a3:fc:eb:2d:
f5:99:d7:1c:fa:ea:8d:76:d2:39:0a:12:f8:95:02:20:a8:2b:
93:49:72:b4:6c:f8:01:93:6d:75:8a:6d:dc:9c:dc:4e:e5:14:
87:41:fa:9f:cc:00:3f:73:61:ce:07:70:0a:9e:fe:0e:ce:57:
02:7d:d0:e6:6b:50:86:77:11:66:00:3d:9d:76:c4:6b:cb:98:
a4:b2:80:31:97:52:8e:10:5f:cc:33:ee:cc:a0:03:62:56:61:
16:eb:79:1a:cd:f7:70:60:2d:a7:2c:68:65:07:63:ee:91:c3:
b8:96:b6:56:62:56:69:ec:a6:f9:c0:68:cf:5a:3a:77:b2:8d:
90:7a:3c:07:7f:72:8d:c7:85:e6:ff:ac:f2:b5:a1:a1:68:73:
82:79:38:0f:e3:1a:f1:e9:b7:57:2a:e6:59:21:95:76:3c:ef:
22:96:fe:ab:62:6d:30:7d:b6:3e:cb:46:87:3a:a6:27:b4:f3:
ec:97:9c:6a:ef:e4:94:18:18:85:dc:1a:1b:5d:8b:5c:db:98:
5a:73:22:f0:c9:41:d2:44:cd:5f:f2:df:6d:9d:ab:a7:57:5d:
8c:2f:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:14 2023 by rpki-client on console-fra.rpki-client.org